Hiya Thom, thanks for such a quick reply.

 I like what you've said and your reasoning. Our current DPO (who leaves in a couple of week) is very knee jerk reactionary to such things and so far is insisting all our data needs to go on separate servers. Though I am getting a whiff of BS there and don't want us to rush in following his heavy handedness if its all speculation. So, as its a new development it wont hurt to go with Row Level security as a method of segregating the data until there is more definitive guides as to how it should handled.

Cheers Thom. Massive help.

Alex